Fortinet Community
Recently active
The https://futurecio.tech/a-secure-future-goes-beyond-automation/ discusses the role of Security Orchestration, Automation, and Response (SOAR) in cybersecurity, emphasizing the need for mature cybersecurity processes for effective implementation. Abhishek Narula, CTO at Fortinet's SOAR business unit, highlights the importance of AI in both defensive and adversarial cyber activities. He dispels concerns about automation taking away jobs and emphasizes the value SOAR brings to Security Operations Centers (SOCs). Narula suggests a broader definition of SOAR as "streamlined operations and accelerated response" and advocates for a unified console for comprehensive security analysis. The article also touches on the connection between SOAR and Security Information and Event Management (SIEM), the adoption of SOAR by managed security service providers, and the significance of partnerships in addressing cyber threats. Finally, Narula advises focusing on SaaS and convergence as key themes for
Exciting news! FortiSOAR™ unveils a series of robust enhancements, including the Outbreak Response - ConnectWise ScreenConnect Attack v1.0.0 solution pack, designed to elevate threat hunting capabilities and effectively tackle security risks. Additionally, fortify your workflows with the secure and efficient management of critical secrets through Keeper Secret Manager v1.0.0. Version 3.3.0 introduces improved utilities integration, optimizing operational processes and enhancing the overall versatility of utilities within FortiSOAR™ for a more efficient and seamless user experience. The table below outlines the advancements achieved since the last announcement Type Name Link Solution Pack ConnectWise ScreenConnect Attack v1.0.0 Link Connector Qualys v1.0.2 Link Connector SecurityTrails v1.0.0 Link Connector Keeper Secret Manager v1.0.0 Link Connector Utilities Connector v3.3.0 Link
In a world where people, data, devices, and applications can be located virtually everywhere, sophisticated threats are being designed to take advantage of your expanding attack surface. In these dynamic environments, the traditional approach to security—bolting on a new product to your technology stack to protect a new attack surface—is no longer sustainable. Staying ahead of tomorrow’s threats requires embracing a new approach to security and networking today. Security needs to adapt and scale with your network, which means that converging and consolidating software, hardware, and other technologies into a single platform is no longer simply nice to have, it’s a vital step in securing your business for years to come. Welcome to the platform era of cybersecurity. Join Us at Fortinet Accelerate 2024 Now in its eighth year, Accelerate 2024 is your chance to discover real-world, actionable solutions designed to help you improve your security strategy, better protect your organiza
As more and more users are using remote access VPNs and probably using FortiClient, I wanted to share the errors you are encountering based on the percentage when it fails and some troubleshooting steps around Remote Access VPNs. Percentage and Possible Issue - 10% – Local Network/PC issue - 40% – Application or the Fortigate causing the error, occasionally caused by the local machines/network setup - 45% – MultiFactor Authentication - 80% – Username/Password issue - 98% – corruption of services/often resolved by reinstalling the client on the laptop. Here are some troubleshooting commands for the SSL VPNs on the FortiGate. You can run them from the GUI Console screen or by using your favorite terminal application (e.g. SecureCRT, PuTTY, ZOC, etc.) di deb reset di deb app sslvpn -1 di deb en Set the terminal to capture the output to a file. This will be useful to provide to TAC if needed. diag deb reset diag deb console time en diag deb app fnbamd -1 diag deb en The comma
FortiSOARs commitment to proactive security is evident with the introduction of Solution Packs, emphasizing swift response strategies. The C2 Malware Traffic Response pack ensures rapid action against C2 attacks, while new outbreaks like "Adobe ColdFusion Access Control Bypass Attack v1.0.0" and "Androxgh0st Malware Attack v1.0.0" are added to the outbreak framework. The Phishing Email Response Solution Pack streamlines incident response in the Security Operations Center, providing a robust defense against suspicious emails. Fortinet's suite of connectors facilitates efficient data integration and proactive threat defense, including the Plain text Feed v1.0.0, FortiGuard v3.1.3 for real-time threat intelligence, and Remote ScreenShot v1.0.1 for visual insights. Integration with Qualys Web Application Scanning(WAS) 2.0.0 and Tenable Security Center v1.1.0 further enhances vulnerability management, empowering organizations with advanced capabilities.The table below outlines the advanceme
Congratulations to BK Bharathram, Abhishek Narula, and Pooja Singh on successfully obtaining a patent for "Systems and methods for generating SOAR playbooks"! Your collaborative efforts and innovative approach have truly left a mark in the field of security orchestration, automation, and response. Wishing you continued success and eagerly anticipating more remarkable achievements in your professional journeys! <snippet from patent>FIELD Embodiments of the present invention generally relate to generation of SOAR playbooks using a variety playbook sources. BACKGROUND A great deal of human effort has been applied to developing processes in relation to network monitoring and maintenance. Such efforts are often not transferrable as new processes and/or systems are brought online. A new approach called “Security Orchestration, Automation, and Response” (SOAR) has become popular. In such SOAR based systems the ability to use an automation framework effectively to orchestrate network act
Background AnyDesk is a remote desktop solution for customers to access their machines over the internet wherever they are located. AnyDesk has 170,000 customers worldwide including major players in different industry verticals. On February 2,2024, AnyDesk reported they found indications that their production server was compromised. AnyDesk revoked all security-related certificates that were used to sign their binaries and issued a new one. The Problem FortiGuard Applied Threat Research (ATR) team suspects attackers who have access to the revoked certificate can use it to sign and distribute malware disguised as legitimate software. This can bypass security measures and have devastating consequences, like data breaches, ransomware attacks, and reputational damage. FortiGuard ATR FortiGuard ATR continually processes threat intel from various sources, creating detections to ensure FortiNDR Cloud customers can detect and respond to any network related thre
As we step into the promising landscape of 2024, FortiSOAR extends its warm wishes and enthusiasm for the year ahead. We are thrilled to unveil our inaugural release announcement of the year. The release includes a comprehensive set of Solution Packs addressing outbreak responses, vulnerability management, and security incidents. Additionally, a diverse array of Connectors, Widgets, and a Splunk App enrich our offering, elevating capabilities in threat intelligence integration and incident monitoring. The incorporation of a Rapid Development Kit (RDK) underscores FortiSOAR's dedication to facilitating the creation of third-party integrations and connectors effortlessly, while also fostering similar outcomes from community contributors.The table below outlines the advancements achieved since the last announcement Type Name Link SolutionPack Outbreak Response Lazarus Rat Attack v1.0.0 Link SolutionPack FortiManager ZTP Flow - Feature Examples v1.0.2 Link SolutionPac
Quick Guide to FortiGuard Advanced Bot Protection(ABP) Deployment A significant portion of internet traffic is generated by Bot, and they can have both legitimate and malicious purposes. Enhancing application security with machine-learning capabilities is a proactive approach to detect and block sophisticated Bots. This can help protect against various threats, including data theft, account takeovers, and network resource overload. Machine learning allows security systems to adapt and identify new patterns of Bot behavior, making it a valuable tool in the ongoing battle against cyber threats. Fortinet recently released FortiABP to detect and mitigate sophisticated Bot to prevent fraudulent activities, spamming, scraping, or other attacks on websites, applications, or APIs. FortiGuard ABP SaaS incorporates behavioral analysis and deep learning to protect businesses from financial losses, reputational damage, and regulatory penalties. With FortiABP protection is simplifi
Fortinet Application Security Landscape Introduction Web Application Security deployment has been critical in recent years as applications have become highly dynamic and critical in every business. As remote users have increased in recent years, more and more applications are deployed. As the business grows, the requirement to dynamically change content, react to real-time events, and deploy systematically is essential. With these dynamic changes to the application, the ability to secure and protect data/network assets are critical, especially when a business is under pressure to deliver. This document gives you a complete perspective of how Fortinet security solutions can secure and protect applications across your enterprise. Fortinet provides a whole gamut of Application Security Solutions, ensuring your applications/data are protected, strengthen business resilience and improve application security posture. What is Application Security? Web applications are hackers'
Fortinet’s highest level of strategic partnership available is the Fabric-Ready Technology Alliance Program. It consists of hundreds of partners with over 500+ technical integrations. The program is not limited to traditional, enterprise cybersecurity partners. In fact, the Fabric-Ready program has a vibrant collection of Operational Technology-focused cybersecurity partners. This aligns with Fortinet’s goal of being #1 in OT. Partners in the program benefit from their solutions being pre-validated and ready for deployment in OT environments. These solutions leverage the collaborative power of the Fabric to share information and mitigate threats, leading to rapid response from network end-to-end, and seamlessly covering the entire attack surface of your company. As in-person events have continued to increase in attendance following the recent pandemic, Fortinet’s Technology Alliance Program has responded with a strong presence supporting Operational Techn
Have you ever wondered how organizations successfully determine if they are susceptible to malware or ransomware attacks, and are able to remediate quickly? The answer is their people. There is always a team of security experts working behind the scenes to ensure their infrastructure is protected and up to date. Although every company may name the role differently, all organizations have similar responsibilities assigned to their “Security Operations Center”, also commonly known as a SOC team. SOC teams face countless challenges and are usually understaffed to deal with and investigate into the most important threats, often leading to alert fatigue. It takes numerous hours to sift through these alerts, determine suspicious activities, and to find a possible fix. SOC teams employ SOC analysts/security analysts – the frontliners to fight against threats. Here are few of their responsibilities: Detecting and hunting threats Operating and maintaining various monitoring and t
What is Wi-Fi 7 and why should you care? Wi-Fi 7, technically known as IEEE 802.11be or Extremely High Throughput (EHT), is the next generation of wireless technology that will revolutionize the way we connect to the internet. Building on the foundation of Wi-Fi 6 and Wi-Fi 6E, Wi-Fi 7 promises to deliver unprecedented speed, capacity, and reliability for a wide range of applications and devices. In this blog, we will explore some of the key features and benefits of Wi-Fi 7 and how it will impact our digital lives. How we reached here? As with most generational improvements, Wi-Fi 7(802.11be) is designed to offer faster speeds and improved performance than its predecessor, Wi-Fi 6(802.11ax). When FCC voted to open a part of 6 GHz spectrum in April 2020 for unlicensed use, all wireless industry experts saw this the biggest opportunity for Wi-Fi upgrade since the FCC opened DFS channels for Wi-Fi in 2003. This quadrupled the amount of spectrum available to users, meaning the Wi-Fi issue
The World and the Internet As of October 2023, the world has surpassed a growing internet user of over 5.3 Billion internet users worldwide. These growing users account for 66 percent of the global population. Internet has become a multifaceted mass medium of information that the world has been relying on. Now that the internet has become the primary medium of communication of the world, the internet is full of bots categories as good bots and bad bots. In 2022, 47.4% of all internet traffic came from bots, a 5.1% increase over the previous year with evolving factors of bad bots. In 2018, the increasing trend of bad bots continues to 30.2 percent over the past four years-contributed by malicious automated software applications capable of high-speed abuse, misuse and attacks. Here are some of 2022 notable Bots undertakings: In 2022, the proportion of bad bots classified as “advanced” accounted for 51.2% of all bad bots traffic. In comparison, the level of bad b
Tech Enthusiasts and Solution Seekers! Embark on a journey of innovation as we proudly introduce our latest Content Hub additions! Brace yourselves for a wave of cutting-edge connectors, widgets, and solution packs meticulously crafted by our dedicated team to elevate your workflow and turbocharge productivity. Immerse yourself in the seamless connectivity of our new connectors, forging instant links with your favorite applications. Revel in swift access to crucial information through our intuitive widgets, designed to make your tasks effortlessly efficient. Take on specific challenges with confidence, armed with our comprehensive solution packs that are tailor-made to optimize your workflow. But that's not all – we've left no stone unturned in updating our existing offerings, ensuring complete compatibility with the latest versions of your preferred tools and platforms. Whether you're a small business, or a thriving enterprise, we've got your back! Unlock the unta
FortiSOAR has unveiled its latest release, version 7.4.3, featuring groundbreaking innovations aimed at enhancing user experience and efficiency. One notable introduction is the Fortinet Advisor, currently in its preview version, serving as an AI assistant tailored for FortiSOAR users and compatible with version 7.4.3 and later. Fortinet Advisor Key Features: Effortless Playbook Design: The Advisor simplifies playbook development by generating playbook blocks, significantly reducing the time and effort required. This is especially beneficial for users new to playbook creation. AI-Assisted Threat Analysis: During threat investigations, the Advisor provides contextual answers and insights. Its natural language capabilities make it a valuable companion in understanding and responding to security incidents. Jinja Expression Assistance: The Advisor assists users in simplifying the complexity of Jinja expressions, offering guidance and support for more effective security workflows. E
Exciting News for Tech Enthusiasts and Solution Seekers! We are thrilled to unveil our latest marketplace additions, featuring cutting-edge connectors, widgets, and solution packs! Our dedicated team has tirelessly crafted these innovations to elevate your workflow and supercharge productivity. Seamlessly link up with your favorite applications using our new connectors, and enjoy swift access to crucial information with our intuitive widgets. Tackle specific challenges head-on with our comprehensive solution packs, designed to optimize your efficiency. But that's not all – we've diligently updated our existing offerings to ensure full compatibility with the latest versions of your preferred tools and platforms. Whether you're a small business, freelancer, or large enterprise, we've got your back! Unlock the potential of your workflow. Explore our marketplace now for the complete lineup of our groundbreaking new releases and enhanced offerings. Don't miss out
With over 500 connectors, 45 Solutions Packs, and numerous widgets, our content hub is designed to make it easy for you to find the content you need. Whether you are looking for connectors, widgets, or solutions packs, we have something for everyone. We are also proud to announce the availability of updated versions of on our content hub. These new versions offer enhanced performance, improved design, and additional features to help you customize your FortiSOAR instance with ease. The following table summarizes the progress we have made since the last announcement. # Type Name 1 Solution Pack Outbreak Response Management Framework v1.0.0 [Doc] 2 Solution Pack Outbreak Response - Progress MOVEit Transfer SQL Injection Vulnerability v1.0.0 [Doc] 3 Solution Pack Outbreak Response Log4J v1.0.0 [Doc] 4 Solution Pack Phishing Incident Management v1.1.0 [Doc] 5 Solution Pack SOC Utilities v1.0.1 [Doc] 6 Connector Azure Firewall v2.0.1 [Doc] 7 Connector Ex
FortiSOAR Content Hub Gets Even Better with New Connectors, Widgets, and Solution Packs We're releasing a new batch of connectors, widgets, and solution packs for FortiSOAR, our security orchestration, automation, and response (SOAR) platform. These new offerings will help you streamline your security operations and improve your overall security posture. What's New Connectors: We're adding support for even more security tools and technologies, including Abnormal Security, SLA Calculator v2, and updates to Extrahop and other connectors. Widgets: We're making it easier for you to access the information you need most with new widgets for Global Visibility, like Top X and Record Summary. Solution packs: We're helping you tackle specific security challenges with new solution packs. Existing offerings We've also updated our existing FortiSOAR connectors, widgets, and solution packs to ensure that they're compatible with the latest versions of security tools and technologies. How to get st
With due credit to FortiSOAR's devoted Product Manager, who happens to excel in crafting release poems as well. MSSPs are in more control,Playbook Designers, in joy, will roll,2FA with Google was a long term goalwell the list is huge, you’ll need a scroll!Our effort to make this fragrant bouquet has been made - We hand over this to you, embrace it, 7.4.2 is GA’d! This masterpiece encapsulates the passion, hard work, and innovation that has gone into the crafting of yet another exceptional release. For more see :https://community.fortinet.com/t5/FortiSOAR-Discussions/FortiSOAR-announces-release-version-7-4-2/td-p/278034
Exciting developments have emerged on our Content Hub, designed to empower your cybersecurity efforts. We're thrilled to introduce an array of new connectors, widgets, and solution packs that promise to revolutionize your Security and Automated Response playbooks. Seamlessly integrate with Microsoft OneDrive, Pure Storage Flash Array, Duo, and over 600 others! These connectors unlock the potential to harness richer data and insights, bolstering your security posture.! Elevate your operational efficiency with our pre-built solution packs. These comprehensive templates come complete with playbooks and user flows addressing common use cases and some not so common such as working with GDPR and HIPAA regulations. It's your shortcut to streamlined threat response and mitigation. Moreover, we've not just stopped at the new additions; we've also fine-tuned existing content. Expect enhanced features and improved performance to ensure you're at the forefront of threat intell
We are excited to announce that new connectors, widgets, and solution packs are now available on the Content Hub. We have also released new versions of existing content with enhanced features and improved performance. Our new connectors enable seamless integration with popular threat intel platforms like Azure's Web Application Firewall, FullHunt, Have I Been Pwned, and 500 more! Solution packs provide pre-built templates for common use cases, complete with playbooks and user flows! The following table summarizes the progress we have made since the last announcement. 1 Solution Pack Threat Intel Management v1.2.1 [Doc] 2 Connector Azure Front Door WAF v1.0.0 [Doc] 3 Connector Fortinet FortiGuard Threat Intelligence v3.1.2 [Doc] 4 Connector Fullhunt v1.0.0 [Doc] 5 Connector Have I Been Pwned v2.0.1 [Doc] 6 Connector Maltiverse v1.0.0 [Doc] 7 Connector Palo Alto Networks Panorama v3.1.0 [Doc] 8 Connector Palo Alto Firewall 3.1.0 [Doc] 9 Connector T
Attention all tech enthusiasts and solution seekers! We are thrilled to introduce our latest innovations now available on the Content Hub - an array of new connectors, widgets, and solution packs! Our dedicated team has put in countless hours of effort to deliver cutting-edge solutions that will supercharge your productivity and streamline your workflow. Our new connectors make it a breeze to link up with your favorite applications and platforms, while our widgets offer speedy access to crucial information. Additionally, our solution packs are comprehensive toolkits designed to empower you in tackling specific challenges and optimizing your workflow. Furthermore, we've gone the extra mile to ensure that our existing offerings are fully compatible with the latest versions of your beloved tools and platforms. It doesn't matter if you're a small business owner, a freelancer, or a major enterprise - we've got your needs covered! Don't wait; elevate your workflow today!
Community Announcement: Introducing New Solution Packs, Widgets, and Connectors on the Content Hub! Our team has been hard at work to bring you a range of innovative solution packs, widgets, and connectors to enhance your experience and unlock new possibilities. Solution Packs: We have introduced solution packs tailored to specific needs and industries. These packs come pre-packaged with a collection of templates, assets, and tools designed to jump-start your projects and streamline your workflow. Widgets: Widgets are versatile components that allow you to embed interactive elements seamlessly into your content. With these widgets, you can easily add interactivity and dynamic elements captivating your audience and driving user engagement. Connectors: Our latest connectors enable you to effortlessly link various platforms and services with FortiSOAR™, enabling smooth data flow and automation. Connectors for popular services like CRM systems, email and cloud s
Community Announcement: Discover New Heights of Efficiency with Our Latest Offerings! We are thrilled to unveil a wave of groundbreaking features designed to elevate your experience on the Content Hub! Our dedicated team has been diligently working to introduce an array of innovative tools that will empower you to achieve more with your projects and content. Solution Packs: Imagine having a curated set of resources right at your fingertips to kickstart your projects effortlessly. Our brand-new Solution Packs are precisely that! Tailored to cater to specific needs and industries, these packs come complete with an assortment of templates, tools, and assets. This means you can now embark on your projects with boosted confidence, knowing that you have a head start towards success. Connectors: Efficiency and automation are the cornerstones of modern workflows. Our latest Connectors enable you to effortlessly link various platforms and services to FortiSOAR™. Whether it's synci
Already have an account? Login
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
